Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: iZedpBSKTgTfShn5UAmqosstRC2GLVMJ6Uz0rM5dhDw=
Subject key identifier: 87:3E:F8:AA:F1:16:85:E4:9E:91:CA:76:37:BF:44:C9:63:AA:CF:D3
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 01A0FCB44BBDB21D385C44B9201114DE110F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1A8E
Signing time: Fri 02 Oct 2026 13:01:09 +0000
Manifest this update: Fri 02 Oct 2026 13:01:09 +0000
Manifest next update: Sat 03 Oct 2026 13:01:09 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: ToUwCOK2OLcvN3zNT5fKlyh+K+oPExIaugPMPdhOHtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:4b:bd:b2:1d:38:5c:44:b9:20:11:14:de:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Oct 2 13:01:09 2026 GMT
Not After : Oct 3 13:01:09 2026 GMT
Subject: CN=873ef8aaf11685e49e91ca7637bf44c963aacfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:9f:2d:ce:67:b3:30:b4:ad:6f:10:a8:74:
4e:f1:32:a0:09:1f:e6:e5:e3:aa:36:25:40:7a:fe:
8d:28:b8:73:e6:33:0a:53:d8:63:77:71:ae:df:dc:
25:6b:2a:7d:16:e7:e0:62:2b:21:cd:c9:a2:55:db:
d1:96:7f:54:60:17:fb:a3:0f:10:f3:1a:40:7f:f4:
b5:57:55:3b:73:51:ce:e5:f7:65:db:e9:ab:86:27:
31:30:05:98:19:ec:c7:41:4c:b0:c5:04:f7:2c:76:
1d:92:b0:72:88:20:e8:33:18:5d:30:cb:08:8f:fc:
97:f7:34:07:d7:ab:0b:00:12:1c:40:e5:bb:db:c0:
15:91:65:a0:60:18:df:d2:cd:4d:e1:8c:10:48:80:
34:e7:ed:6b:d6:69:8b:34:a2:d8:90:6c:ee:14:07:
eb:d5:c3:3e:7c:c3:e7:a2:21:16:ad:a4:3a:80:44:
3e:26:8b:29:c7:c2:56:cf:9e:f3:97:66:c9:e2:6f:
b7:1a:7a:49:7c:35:b3:5a:58:a4:d2:f2:7d:97:12:
64:21:57:38:54:32:41:ee:5f:81:79:a4:cd:78:40:
d0:35:3b:b4:a1:37:d0:0f:a2:5b:e5:0b:a4:24:58:
7f:89:de:33:01:93:5c:fc:ab:f4:af:a1:21:b4:ae:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:F8:AA:F1:16:85:E4:9E:91:CA:76:37:BF:44:C9:63:AA:CF:D3
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d7:b6:e9:1d:57:93:6c:c8:74:e2:c2:96:e1:51:f5:96:2a:
da:0b:ee:39:7e:10:9b:59:0c:36:59:80:e8:6e:7e:aa:80:a8:
39:d9:09:d6:86:c1:09:42:f4:f2:d5:d6:3a:55:6b:63:c9:b2:
6b:c7:99:6b:81:ac:2f:40:c3:83:5b:60:30:d8:23:eb:1b:04:
04:5d:cb:4b:0b:e9:ac:3b:bc:0e:91:48:71:6c:bb:26:3c:86:
ee:c6:24:77:f8:b4:42:a7:9a:58:d0:9e:3c:c1:88:81:d3:22:
0f:c9:3f:83:19:6b:a9:de:6b:b8:9d:f4:9f:09:78:ee:99:17:
41:9a:08:81:91:e7:0c:17:51:9c:86:f6:40:f0:f6:bf:7a:dd:
73:f6:88:d9:18:11:df:65:15:30:f6:ad:4d:93:f8:8a:f9:0d:
d8:89:05:f1:ed:2b:93:99:1a:9b:7b:4d:c7:19:7b:ce:84:19:
28:e7:08:6b:34:52:16:6c:71:47:41:21:4c:90:55:ed:62:d6:
a2:9b:c5:70:7d:f6:cc:88:03:77:c4:05:ea:8e:02:21:f4:ec:
ab:70:bc:77:f2:e4:fd:ec:43:02:63:68:89:14:1a:fa:25:15:
e8:bd:01:a6:78:ec:5a:6b:fe:e1:ac:c6:93:14:9a:9e:3e:90:
f2:88:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:54:54 2026 by rpki-client